netfilter: nft_payload: add packet mangling support

Browse source

Add support for mangling packet payload. Checksum for the specified base
header is updated automatically if requested, however no updates for any
kind of pseudo headers are supported, meaning no stateless NAT is supported.

For checksum updates different checksumming methods can be specified. The
currently supported methods are NONE for no checksum updates, and INET for
internet type checksums.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Patrick McHardy 2015-11-24 10:00:22 +00:00 • committed by Pablo Neira Ayuso

parent a9ecfbe7fc

commit 7ec3f7b47b

3 changed files with 155 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

9

include/net/netfilter/nf_tables_core.h

View file

17

include/uapi/linux/netfilter/nf_tables.h

View file

135

net/netfilter/nft_payload.c

View file